Gestione di certificati SSL per Apache con letsencrypt - Revision history

Gabriele.vivinetto: /* Debian Buster */

2020-05-18T14:37:34Z

Debian Buster

@@ Line 47: / Line 47: @@
 ==Debian Buster==
   apt-get install dehydrated dehydrated-apache2
 =Configurazione=

2020-01-15T13:33:07Z

Debian Jessie

← Older revision		Revision as of 13:33, 15 January 2020
Line 11:		Line 11:
	==Debian Jessie==		==Debian Jessie==
	* Il pacchetto è obsoleto, occorre installare il backport di stretch		* Il pacchetto è obsoleto, occorre installare il backport di stretch

			* Installare prima il pacchetto dai backports di Jessie:
			echo deb http://archive.debian.org/debian jessie-backports main contrib non-free >> /etc/apt/sources.list
			echo "Acquire::Check-Valid-Until "false";" >> /etc/apt/apt.conf

			apt-get update
	apt-get install dehydrated dehydrated-apache2		apt-get install dehydrated dehydrated-apache2
	cd /tmp		cd /tmp
	wget http://ftp.it.debian.org/debian/pool/main/d/dehydrated/~~dehydrated-apache2_0~~.6.2-2+deb10u1~bpo9+1_all.deb		wget http://ftp.it.debian.org/debian/pool/main/d/dehydrated/dehydrated_0.6.2-2+deb10u1~bpo9+1_all.deb
	dpkg -i ~~dehydrated-apache2_0~~.6.2-2+deb10u1~bpo9+1_all.deb		dpkg -i dehydrated_0.6.2-2+deb10u1~bpo9+1_all.deb

			* Verificare la versione
			dehydrated --version\| grep 'Dehydrated version:'

			Dehydrated version: 0.6.2

	* Forzare API V2		* Forzare API V2
Line 25:		Line 36:
	# Staging		# Staging
	#CA="https://acme-staging-v02.api.letsencrypt.org/directory"		#CA="https://acme-staging-v02.api.letsencrypt.org/directory"
	~~Eofile~~		EOFile
	</pre>		</pre>

2020-01-15T13:15:23Z

2019-12-11T16:45:48Z

← Older revision		Revision as of 16:45, 11 December 2019
Line 93:		Line 93:
	sudoedit /etc/dehydrated/conf.d/00-STAGING.sh		sudoedit /etc/dehydrated/conf.d/00-STAGING.sh

	CA="https://acme-staging.api.letsencrypt.org/directory"		CA="https://acme-staging-v02.api.letsencrypt.org/directory"
	CA_TERMS="https://acme-staging.api.letsencrypt.org/terms"		CA_TERMS="https://acme-staging-v02.api.letsencrypt.org/terms"

	* Richiederlo		* Richiederlo
			/usr/bin/dehydrated --register --accept-terms
	/usr/bin/dehydrated --cron		/usr/bin/dehydrated --cron

Line 110:		Line 111:

	* Richiedere il vero certificato:		* Richiedere il vero certificato:
	/usr/bin/dehydrated --cron		/usr/bin/dehydrated --register --accept-terms
			/usr/bin/dehydrated --cron

2017-09-12T12:39:29Z

@@ Line 88: / Line 88: @@
   www.example.com aliasname.example.com
 * Richiederlo
@@ Line 95: / Line 102: @@
   /var/lib/dehydrated/certs/www.example.com/fullchain.pem
   /var/lib/dehydrated/certs/www.example.com/privkey.pem
 = Installazione manuale di dehydrated (DEPRECATO) =

2017-09-11T10:58:02Z

Installazione in Debian Jessie con backports

← Older revision		Revision as of 10:58, 11 September 2017
Line 79:		Line 79:

	<pre>		<pre>
	MAILTO=admin@~~rvmgroup~~.it		MAILTO=admin@example.com
	01 11 * * * root /usr/bin/dehydrated --cron > /dev/null		01 11 * * * root /usr/bin/dehydrated --cron > /dev/null
	11 11 * * * root /etc/dehydrated/hooks/deploy.sh > /dev/null		11 11 * * * root /etc/dehydrated/hooks/deploy.sh > /dev/null

2017-05-18T09:50:38Z

Installazione in Debian Jessie con backports

← Older revision		Revision as of 09:50, 18 May 2017
Line 33:		Line 33:
	BASEDIR="/var/lib/dehydrated"		BASEDIR="/var/lib/dehydrated"
	SSLDIR="/etc/ssl"		SSLDIR="/etc/ssl"
			SERVICES="apache2 dovecot postfix vsftpd"

	RESTART=false		RESTART=false
Line 64:		Line 65:
	if $RESTART		if $RESTART
	then		then
	~~# Restart relevant services~~		for SRV in $SERVICES
	~~echo Restart apache2~~		do
	~~systemctl restart apache2 > /dev/null~~		echo Restart $SRV
	echo Restart ~~postfix~~		systemctl restart $SRV > /dev/null
	systemctl restart ~~postfix~~ > /dev/null		done
	~~echo Restart dovecot~~
	~~systemctl restart dovecot > /dev/null~~
	~~echo Restart vsftpd~~
	~~systemctl restart vsftpd > /dev/null~~
	fi		fi

	</pre>		</pre>

2017-05-10T12:46:33Z

@@ Line 8: / Line 8: @@
 :/var/www/example.com/www/html/
-=Procedura con dehydrated=
+=Installazione in Debian Jessie con backports=
 ==Configurazione di Apache==

2017-02-17T11:55:11Z

Per apache 2.4

← Older revision		Revision as of 11:55, 17 February 2017
Line 36:		Line 36:

	==== Per apache 2.4 ====		==== Per apache 2.4 ====
	sudoedit /etc/apache2/conf-available/~~letsencrypt~~.conf		sudoedit /etc/apache2/conf-available/dehydrated.conf

	<pre>		<pre>
	<Directory "/etc/~~letsencrypt.sh~~/.well-known/acme-challenge/">		<Directory "/etc/dehydrated/.well-known/acme-challenge/">
	Options None		Options None
	AllowOverride None		AllowOverride None
Line 46:		Line 46:
	</Directory>		</Directory>

	Alias /.well-known/acme-challenge/ /etc/~~letsencrypt.sh~~/.well-known/acme-challenge/		Alias /.well-known/acme-challenge/ /etc/dehydrated/.well-known/acme-challenge/
	</pre>		</pre>

	sudo a2enconf ~~letsencrypt~~		sudo a2enconf dehydrated

	==== Per apache 2.2 ====		==== Per apache 2.2 ====
	sudoedit /etc/apache2/conf.d/letsencrypt.conf		sudoedit /etc/apache2/conf.d/letsencrypt.conf

2016-12-12T14:02:44Z

Configurazione del Virtualhost HTTPS

← Older revision		Revision as of 14:02, 12 December 2016
Line 153:		Line 153:
	* I certificati verranno utilizzati in apache come:		* I certificati verranno utilizzati in apache come:

	SSLCertificateKeyFile /etc/~~letsencrypt.sh~~/certs/www.example.com/privkey.pem		SSLCertificateKeyFile /etc/dehydrated/certs/www.example.com/privkey.pem
	SSLCertificateFile /etc/~~letsencrypt.sh~~/certs/www.example.com/fullchain.pem		SSLCertificateFile /etc/dehydrated/certs/www.example.com/fullchain.pem
	SSLCertificateChainFile /etc/~~letsencrypt.sh~~/certs/www.example.com/fullchain.pem		SSLCertificateChainFile /etc/dehydrated/certs/www.example.com/fullchain.pem

	* Riavviare Apache e testare l'accesso in HTTPS:		* Riavviare Apache e testare l'accesso in HTTPS:
Line 181:		Line 181:
	SSLCertificateFile /etc/ssl/certs/www.example.com.crt		SSLCertificateFile /etc/ssl/certs/www.example.com.crt
	SSLCertificateChainFile /etc/ssl/certs/www.example.com.crt		SSLCertificateChainFile /etc/ssl/certs/www.example.com.crt


	==Script di deploy dei certificati==		==Script di deploy dei certificati==